Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Px2EqRIgjQaE4ET8i1iSKdi1LOM.roa
File: Px2EqRIgjQaE4ET8i1iSKdi1LOM.roa (raw, json)
Hash identifier: h+MvcNpG071nv+966C1pfO834Y0etHCU8DXzMea4Deo=
Subject key identifier: 3F:1D:84:A9:12:20:8D:06:84:E0:44:FC:8B:58:92:29:D8:B5:2C:E3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BDC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Px2EqRIgjQaE4ET8i1iSKdi1LOM.roa
Signing time: Tue 04 Feb 2025 04:25:37 +0000
ROA not before: Tue 04 Feb 2025 04:25:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 04:25:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3F1D84A912208D0684E044FC8B589229D8B52CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:ed:4b:68:51:78:b8:70:90:71:fa:8a:ab:
00:e1:17:89:01:af:96:74:a8:ec:68:67:70:b2:64:
47:71:20:d6:63:d4:20:d7:51:c8:d8:b5:3d:e8:2f:
1e:87:05:d0:df:9e:1c:02:9e:02:b0:80:cc:f4:1d:
fc:e5:87:a9:77:7d:c5:24:72:55:42:04:c2:77:a0:
b4:1d:dd:d6:a9:1b:bc:2b:30:c9:ee:b2:c7:63:43:
4d:33:09:02:dd:2f:c8:29:07:b7:0f:d7:2e:1f:7f:
3f:00:7b:ba:e0:41:02:62:03:ee:65:fd:7c:54:0a:
59:1b:e9:b5:79:5b:52:9e:03:78:39:e9:71:62:29:
99:54:d4:51:4b:b0:3c:08:01:08:c1:86:31:b3:68:
32:8c:5d:cb:8c:eb:72:ba:5b:14:24:e0:ef:14:61:
3e:98:ee:b3:ee:31:6c:9e:6c:ed:45:5a:04:24:1a:
99:22:1f:52:cb:b6:73:25:f6:f1:33:a3:d9:f6:9f:
13:04:8a:04:b1:df:0d:07:c2:15:d4:05:6f:53:c0:
0f:de:50:6e:71:41:5c:2a:47:d3:e2:63:a9:db:72:
e2:5e:76:e4:06:9a:70:e4:a9:23:71:a7:4d:51:5e:
c7:4b:53:bc:a6:c8:1b:da:22:ce:52:aa:28:ee:b3:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1D:84:A9:12:20:8D:06:84:E0:44:FC:8B:58:92:29:D8:B5:2C:E3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Px2EqRIgjQaE4ET8i1iSKdi1LOM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
93:58:76:41:34:9e:05:59:e6:36:de:f0:9f:8d:1a:2a:fd:3e:
06:ff:9b:b9:45:75:d4:88:63:92:77:90:22:99:8a:5f:32:b5:
37:dc:5d:cb:d3:5b:bb:0e:c5:6f:4e:78:98:b5:b9:7d:3d:5b:
94:9c:ed:92:fc:a8:4b:30:6a:e6:be:54:67:c4:f6:1a:0f:2b:
f5:8a:62:5a:91:b7:fc:c8:31:e6:5c:8c:7e:e4:83:88:11:35:
33:c6:62:39:e1:6f:87:dc:71:ac:9c:50:bc:d1:4d:c1:7d:fa:
61:27:70:06:73:5f:59:c0:b3:80:16:cb:f8:ca:04:c7:ae:89:
eb:99:6a:ac:a8:0e:15:d1:d5:d9:00:a8:01:dd:22:84:4c:33:
cc:aa:4e:e6:ff:0a:3b:5c:49:93:38:e3:b9:e0:5b:e0:dc:11:
4c:81:29:78:aa:85:a9:6c:d3:20:37:cb:b6:96:72:18:09:9d:
f0:46:fc:d8:67:cb:38:3d:18:91:29:72:87:f3:b3:d5:82:3f:
60:20:2c:ac:fd:38:19:89:5e:40:cb:46:0b:06:fe:05:b1:79:
68:88:dc:80:90:f3:40:d6:b6:42:8c:69:ae:f3:21:96:84:62:
c4:7b:c3:23:3b:dd:32:2e:44:8e:e5:bf:21:5b:98:be:e9:3f:
9b:f3:33:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:31 2025 by rpki-client